Comment by SoftTalker

How many developers do you need (and trust) to review patches?

They only audit the kernel and base userland. Ports are subject to far less scrutiny.